Various failures occurring in SPY when an external security manager is configured to -NOT- allow SPY transaction to run unattached to a terminal.

Possible symptoms:

SPYE000-QIDERR 00000000 ON READQ TS OF IC01SPYR IN SPYPRBF

Spy only captures one (first) screen.

A terminal being 'SPYED UPON' is 'thrown out' of transaction being executed.

A:

Excerpt from manual:
1.3.1 External Security Installation Notes
The only transactions that can be defined with external security restrictions are marked in the member SPYJRDO (Z/OS) SPYJRDO.JCL (VSE). Search on "TRANSACTION SECURITY" to find the transactions that may be protected. The remaining transaction must not associate with any security.

All SPY transactions should be defined to the external security manager and allowed to run unattached to a terminal.

The screen collection buffer is filling up faster than SPY is processing them. First, if running SPY 2.4 or older, upgrade to a newer release. Use transaction SPYA 'Installation Options' to modify the following parameters:
BUFFSIZE: 032763 - Screen Collection Buffer Size (in bytes)
TURNPOINT: 005000 - # of free bytes left in buffer considered full

SPY Manual excerpt:
BUFFSIZE/TURNPOINT DISCUSSION and STRATEGIES.

To effectively change BUFFSIZE/TURNPOINT to eliminate spills it is important to understand how SPY collects screens. SPY is in the VTAM input/output exits. When the exit encounters a screen it should capture it places it in a buffer where they accumulate until the buffer is 'almost full'. When the buffer is 'almost full' the exit requests another buffer and continues to place screens in the current buffer. If the new buffer is not provided in time the current buffer can fill up completely... that is what causes spills (lost screens).

The TURNPOINT defines what is considered to be 'almost full'. It is the number of bytes remaining in the buffer when a new buffer is requested. Therefore:

a larger TURNPOINT means there will be more space remaining in the current buffer to use

which gives SPY more time to provide the 'new' buffer and prevent the spill.

The ratio between the TURNPOINT and BUFFSIZE is the important consideration when attempting to eliminate spills.